Approved changes feed: RSS · Atom

cpe:2.3:a:avaya:aura_orchestration_designer:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorAvaya (79b6be94-fcaf-5aa3-ae43-dbb8cc49f79d)
ProductAura Orchestration Designer (961d1799-86b2-549a-a3c9-9fe1abf72a4b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-7035 vulnerable 2026-06-08 05:27:11.780467 XXE in Avaya Aura Orchestration Designer
HIGH (8.1)
An XML External Entities (XXE)vulnerability in the web-based user interface of Avaya Aura Orchestration Designer could allow an authenticated, remote attacker to gain read access to information that is stored on an affected system. The affected versions of Orchestration Designer includes all 7.x versions before 7.2.3.
Published: 2021-04-23T21:00:20.316Z
Updated: 2024-09-16T17:14:17.189Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-15613 vulnerable 2026-06-08 05:10:55.167047 Orchestration Designer Runtime Config XSS
HIGH (8.3)
A cross-site scripting (XSS) vulnerability in the Runtime Config component of Avaya Aura Orchestration Designer could result in malicious content being returned to the user. Affected versions of Avaya Aura Orchestration Designer include all versions up to 7.2.1.
Published: 2018-09-21T18:00:00.000Z
Updated: 2024-08-05T10:01:53.675Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.